/* security.css - owned by P5a (admin 2FA pages: /admin/login/2fa, /admin/login/recovery, /admin/security…).
   Linked from App.razor after auth.css. Uses only base.css tokens; login-step pages use AuthLayout and
   P5b's .login-page/.auth-card/.auth-form/.auth-actions/.auth-hint (auth.css); only the extras live here. */

/* ========== Login step (2FA / recovery code) ========== */
.kk-2fa-card .sub {
  line-height: 1.55;
}
.kk-2fa-code {
  font-variant-numeric: tabular-nums;
  letter-spacing: 0.18em;
  font-size: 1.15rem;
  min-height: var(--kk-touch);
}
.kk-2fa-links {
  margin-top: 1.25rem;
  font-size: 0.88rem;
  color: var(--kk-text-secondary);
}
.kk-2fa-links p {
  margin: 0 0 0.4rem;
}
.kk-2fa-links a {
  color: var(--kk-ink);
  text-underline-offset: 3px;
}

/* ========== Management (/admin/security…) ========== */
.kk-sec-back {
  margin: 0 0 0.5rem;
  font-size: 0.88rem;
}
.kk-sec-back a {
  color: var(--kk-text-secondary);
  text-decoration: none;
}
.kk-sec-back a:hover,
.kk-sec-back a:focus-visible {
  color: var(--kk-ink);
  text-decoration: underline;
}
.kk-sec-card,
.kk-sec-codes {
  max-width: 640px;
  margin-bottom: 1.25rem;
}
.kk-sec-card-title {
  font-size: 1.05rem;
  font-weight: 650;
  letter-spacing: -0.02em;
  margin: 0 0 0.9rem;
}
.kk-sec-help {
  color: var(--kk-text-secondary);
  font-size: 0.9rem;
  line-height: 1.6;
}
.kk-sec-status {
  display: grid;
  gap: 0.6rem;
  margin: 0 0 1rem;
}
.kk-sec-status > div {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 0.25rem 1rem;
}
.kk-sec-status dt {
  min-width: 7.5rem;
  font-weight: 500;
  color: var(--kk-text-secondary);
}
.kk-sec-status dd {
  margin: 0;
}
/* Badge text is always --kk-ink (>= 10:1 on the tinted backgrounds, WCAG AA); the state colour is carried by the
   border and the dot, never by the small text itself. */
.kk-sec-badge {
  display: inline-flex;
  align-items: center;
  gap: 0.4rem;
  padding: 0.2rem 0.7rem;
  border: 1px solid transparent;
  border-radius: var(--kk-radius-pill);
  font-size: 0.82rem;
  font-weight: 600;
  color: var(--kk-ink);
}
.kk-sec-badge::before {
  content: "";
  width: 0.5rem;
  height: 0.5rem;
  border-radius: 50%;
  background: currentColor;
  flex: none;
}
.kk-sec-badge-on {
  background: var(--kk-success-bg);
  border-color: var(--kk-success);
}
.kk-sec-badge-on::before {
  background: var(--kk-success);
}
.kk-sec-badge-off {
  background: var(--kk-warn-bg);
  border-color: var(--kk-warn);
}
.kk-sec-badge-off::before {
  background: var(--kk-warn);
}
/* #b02a2a on white is about 6.4:1 (--kk-danger #d64545 is only about 4.4:1). */
.kk-sec-warn {
  color: #b02a2a;
  font-weight: 600;
}
.kk-sec-actions {
  display: flex;
  flex-wrap: wrap;
  gap: 0.5rem;
  margin-top: 0.75rem;
}
.kk-sec-actions .btn {
  min-height: var(--kk-touch);
  display: inline-flex;
  align-items: center;
}
/* Darker than --kk-danger so text/background pairs reach 4.5:1 (#b02a2a vs white is about 6.4:1). */
.kk-sec-danger {
  color: #b02a2a;
  border-color: #b02a2a;
}
.kk-sec-danger:hover,
.kk-sec-danger:focus-visible {
  background: #b02a2a;
  border-color: #b02a2a;
  color: #fff;
}
.btn-dark.kk-sec-danger {
  background: #b02a2a;
  border-color: #b02a2a;
  color: #fff;
}
.btn-dark.kk-sec-danger:hover,
.btn-dark.kk-sec-danger:focus-visible {
  background: #8f2020;
  border-color: #8f2020;
  color: #fff;
}
.kk-sec-inline-form {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 0.25rem 0.75rem;
  margin-top: 1rem;
  padding-top: 1rem;
  border-top: 1px solid var(--kk-line);
}
.kk-sec-form {
  max-width: 420px;
}

/* Setup steps */
.kk-sec-steps {
  margin: 0;
  padding-left: 1.25rem;
  display: grid;
  gap: 1.25rem;
}
.kk-sec-steps > li > p {
  margin: 0.25rem 0 0.5rem;
  color: var(--kk-text-secondary);
  font-size: 0.92rem;
}
.kk-sec-qr {
  width: min(220px, 100%);
  aspect-ratio: 1;
  padding: 0.5rem;
  background: #fff;
  border: 1px solid var(--kk-line-strong);
  border-radius: var(--kk-radius-sm);
  margin: 0.5rem 0;
}
.kk-sec-qr svg {
  display: block;
  width: 100%;
  height: 100%;
}
.kk-sec-key {
  display: inline-block;
  font-size: 0.95rem;
  letter-spacing: 0.08em;
  padding: 0.4rem 0.65rem;
  background: var(--kk-bg);
  border: 1px solid var(--kk-line);
  border-radius: 6px;
  color: var(--kk-ink);
  word-break: break-all;
  user-select: all;
}

/* Recovery codes */
.kk-sec-code-list {
  display: grid;
  grid-template-columns: repeat(2, minmax(0, 1fr));
  gap: 0.5rem 1.5rem;
  margin: 1rem 0;
  padding-left: 1.5rem;
}
.kk-sec-code-list code {
  font-size: 1rem;
  letter-spacing: 0.06em;
  color: var(--kk-ink);
  user-select: all;
}

@media (max-width: 420px) {
  .kk-sec-code-list {
    grid-template-columns: 1fr;
  }
  .kk-sec-actions .btn {
    flex: 1 1 100%;
    justify-content: center;
  }
}

@media print {
  .admin-sidebar,
  .kk-sec-back,
  .kk-sec-actions,
  .alert-success {
    display: none !important;
  }
  .kk-sec-codes {
    border: 0;
    box-shadow: none;
  }
}